Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft
File: tii4qSXEXjrDpxvkEUZimYv0s-A.mft (raw, json)
Hash identifier: WD08mjaYtbM8/B1J/RG0d/SKZPP/rxnTy8AsOE4xhcw=
Subject key identifier: CD:53:F0:D7:60:CC:A3:A1:3D:B3:39:EF:3C:47:54:5A:74:50:A9:7F
Authority key identifier: B6:28:B8:A9:25:C4:5E:3A:C3:A7:1B:E4:11:46:62:99:8B:F4:B3:E0
Certificate issuer: /CN=A91CA8EA/serialNumber=B628B8A925C45E3AC3A71BE4114662998BF4B3E0
Certificate serial: 045C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft
Manifest number: 0450
Signing time: Fri 31 Jan 2025 00:17:26 +0000
Manifest this update: Fri 31 Jan 2025 00:17:25 +0000
Manifest next update: Fri 07 Feb 2025 00:17:25 +0000
Files and hashes: 1: tii4qSXEXjrDpxvkEUZimYv0s-A.crl (hash: mltUJNKdj3HbbfA5xIV415gOm0io6cU2SklpqGiYOGM=)
2: 14A07422D45E11EEB37CB639C4F9AE02.roa (hash: jYyif5XzvidlG1gkLHEZCka6sLKHMVLL3uaZPQUQSWU=)
3: 207388F2D45E11EE8D29793EC4F9AE02.roa (hash: aIqnIQInPJrCMj5K0+1zGOgCOM0xLmrh4KbjkSzgqVY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1116 (0x45c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA8EA/serialNumber=B628B8A925C45E3AC3A71BE4114662998BF4B3E0
Validity
Not Before: Jan 31 00:17:25 2025 GMT
Not After : Feb 7 00:17:25 2025 GMT
Subject: CN=679c1695-9fc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0c:a7:fe:5b:2a:e1:14:85:80:30:00:00:b2:
ba:a3:69:b4:d9:9e:ee:44:5e:cb:86:09:35:48:21:
29:3b:fb:f1:fe:9b:6a:d0:ec:16:e7:66:14:4e:aa:
d8:cd:06:e5:be:97:54:3d:be:9e:1d:ee:0e:31:50:
ac:51:88:4c:b2:fc:b3:13:8f:ec:52:30:d7:36:7f:
42:1c:84:09:e1:f6:05:ae:93:a0:e2:ae:75:21:ac:
4a:88:07:0f:04:2e:29:e7:aa:d1:d5:92:29:30:ff:
8d:f4:d6:69:5a:88:ff:53:7c:42:2b:6b:1f:70:ed:
17:ee:f9:24:5d:e8:74:30:5f:59:2f:47:78:0f:d7:
40:c3:14:19:c4:03:5c:2f:8a:59:bb:f1:c9:17:3c:
53:ff:55:c1:f3:55:d9:02:8b:e1:d9:69:85:65:24:
c1:a0:66:64:a2:9b:74:24:51:18:5b:be:1a:31:e2:
7a:ac:c8:08:39:48:be:19:cf:b1:af:03:85:0a:21:
b2:fd:cb:1e:57:62:ae:20:25:e0:ac:e7:59:71:70:
94:79:f5:45:b4:f5:1b:e2:42:ef:67:fa:17:d1:a4:
db:04:37:0f:33:3a:af:f7:76:a8:0e:16:a0:d1:cc:
e9:90:fe:7e:24:c9:06:b9:c9:6e:48:c1:97:d8:34:
c4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:53:F0:D7:60:CC:A3:A1:3D:B3:39:EF:3C:47:54:5A:74:50:A9:7F
X509v3 Authority Key Identifier:
keyid:B6:28:B8:A9:25:C4:5E:3A:C3:A7:1B:E4:11:46:62:99:8B:F4:B3:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:db:ce:c6:55:59:77:85:e4:3b:4d:98:69:07:c8:51:5f:d7:
e8:a9:d4:b3:2f:9c:3c:d6:5d:3d:26:de:78:d3:2e:b9:bc:e9:
5b:36:7b:8c:f4:c1:a2:c9:18:5c:71:d7:d2:80:92:4e:0a:d1:
b0:c2:3c:80:df:d9:88:a9:b6:69:a5:c2:5d:fc:78:bf:f9:eb:
1b:fb:f8:48:2b:7c:1d:be:6d:dd:54:bf:7c:0c:16:11:00:2d:
d1:74:b0:c5:0d:95:50:b5:7d:a3:e7:3d:7b:1f:e8:ab:d7:74:
df:77:fa:b1:5f:84:db:21:3b:42:73:87:4c:4e:fc:01:54:6d:
9d:b6:59:04:21:27:f9:d8:85:eb:1e:9e:a2:4a:5a:a2:3d:47:
01:5c:98:4b:b9:0e:e4:c0:25:a7:1a:f9:77:27:a3:53:99:cc:
d4:9f:7a:8c:cb:6a:e7:6c:8c:dc:18:fd:a5:6b:66:d8:b0:98:
4e:cb:21:db:d7:00:df:20:8f:03:ce:78:70:fc:7b:e0:dd:4f:
98:b3:3f:9c:f3:23:5a:f2:bf:25:93:1e:d5:3e:da:b6:fb:b0:
46:69:a0:23:f5:37:87:4e:42:4e:93:bb:26:b1:5f:3f:82:19:
c3:c1:49:ba:0b:cf:5d:3a:fe:0d:5d:8e:bb:bb:00:46:82:47:
2f:26:d0:7c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBFwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0E4RUExMTAvBgNVBAUTKEI2MjhCOEE5MjVDNDVFM0FDM0E3MUJFNDExNDY2Mjk5
OEJGNEIzRTAwHhcNMjUwMTMxMDAxNzI1WhcNMjUwMjA3MDAxNzI1WjAYMRYwFAYD
VQQDEw02NzljMTY5NS05ZmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArgyn/lsq4RSFgDAAALK6o2m02Z7uRF7Lhgk1SCEpO/vx/ptq0OwW52YUTqrY
zQblvpdUPb6eHe4OMVCsUYhMsvyzE4/sUjDXNn9CHIQJ4fYFrpOg4q51IaxKiAcP
BC4p56rR1ZIpMP+N9NZpWoj/U3xCK2sfcO0X7vkkXeh0MF9ZL0d4D9dAwxQZxANc
L4pZu/HJFzxT/1XB81XZAovh2WmFZSTBoGZkopt0JFEYW74aMeJ6rMgIOUi+Gc+x
rwOFCiGy/cseV2KuICXgrOdZcXCUefVFtPUb4kLvZ/oX0aTbBDcPMzqv93aoDhag
0czpkP5+JMkGucluSMGX2DTErQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM1T8Ndg
zKOhPbM57zxHVFp0UKl/MB8GA1UdIwQYMBaAFLYouKklxF46w6cb5BFGYpmL9LPg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQThFQS9EOENBMTNDMjQw
NDkxMUVDOUI2RUZFN0JDNEY5QUUwMi90aWk0cVNYRVhqckRweHZrRVVaaW1ZdjBz
LUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RpaTRxU1hFWGpyRHB4dmtFVVppbVl2MHMtQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QThFQS9EOENBMTNDMjQwNDkxMUVDOUI2RUZFN0JDNEY5QUUwMi90aWk0cVNYRVhq
ckRweHZrRVVaaW1ZdjBzLUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAr287GVVl3heQ7TZhpB8hRX9foqdSzL5w81l09Jt540y65vOlbNnuM
9MGiyRhccdfSgJJOCtGwwjyA39mIqbZppcJd/Hi/+esb+/hIK3wdvm3dVL98DBYR
AC3RdLDFDZVQtX2j5z17H+ir13Tfd/qxX4TbITtCc4dMTvwBVG2dtlkEISf52IXr
Hp6iSlqiPUcBXJhLuQ7kwCWnGvl3J6NTmczUn3qMy2rnbIzcGP2la2bYsJhOyyHb
1wDfII8Dznhw/Hvg3U+Ysz+c8yNa8r8lkx7VPtq2+7BGaaAj9TeHTkJOk7smsV8/
ghnDwUm6C89dOv4NXY67uwBGgkcvJtB8
-----END CERTIFICATE-----
Generated at Wed Apr 30 15:44:12 2025 by rpki-client